This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3138372e3235312e302e302f31392d3234203d3e203332303938.roa
File:                     3138372e3235312e302e302f31392d3234203d3e203332303938.roa (raw, json)
Hash identifier:          9rkcnk/BZQH28UUOipdlMtzPlsy3x2UFROE4+jKMOQs=
Subject key identifier:   32:89:60:A6:85:1D:5D:19:E0:87:A8:23:58:E4:7C:4C:E1:74:19:27
Certificate issuer:       /CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
Certificate serial:       4A23FE1D8AB5665925AB74C5E498A47E4A05FD7F
Authority key identifier: 0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3138372e3235312e302e302f31392d3234203d3e203332303938.roa
Signing time:             Tue 06 Jan 2026 19:40:43 +0000
ROA not before:           Tue 06 Jan 2026 19:35:43 +0000
ROA not after:            Tue 05 Jan 2027 19:40:43 +0000
asID:                     32098
IP address blocks:        187.251.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:23:fe:1d:8a:b5:66:59:25:ab:74:c5:e4:98:a4:7e:4a:05:fd:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
        Validity
            Not Before: Jan  6 19:35:43 2026 GMT
            Not After : Jan  5 19:40:43 2027 GMT
        Subject: CN=328960A6851D5D19E087A82358E47C4CE1741927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ab:8d:89:32:ca:59:77:c4:ba:67:be:59:1f:
                    66:33:d4:75:ae:fb:78:98:81:ae:1f:0b:7b:83:ca:
                    e6:e5:ae:0b:94:8f:3c:fe:1a:dd:b7:98:1e:f8:c1:
                    5d:61:d9:61:7a:e4:8c:5b:d6:b4:60:19:34:0a:b6:
                    34:02:5e:ea:5f:14:a3:4a:dd:ad:f5:fe:53:9b:e0:
                    7b:37:35:6f:21:da:cc:a8:3a:73:1a:2f:1c:9a:08:
                    31:92:e8:7b:9f:a3:ef:64:6c:02:27:c3:63:da:db:
                    db:dd:bb:66:ae:c0:c6:12:e0:57:60:a9:70:75:c2:
                    a2:60:5b:52:b6:be:75:94:fd:7b:7a:86:bd:42:88:
                    e1:84:25:4d:1f:e1:5c:5d:69:9c:12:2d:88:dd:b7:
                    93:12:02:11:f0:d4:6c:44:cc:9d:99:f7:01:6e:2d:
                    4c:76:fd:ac:74:2b:e0:4e:1e:a2:5a:ee:aa:55:4e:
                    0a:19:41:82:dc:41:c4:9e:9b:72:4f:88:94:8d:52:
                    52:a2:a0:c0:c3:7b:c8:41:3b:cc:7b:2c:6e:89:de:
                    0b:43:5a:6e:8d:80:e2:36:29:e4:30:78:af:eb:70:
                    9e:64:58:0d:e3:52:08:39:36:9d:d2:be:19:67:b0:
                    e0:11:45:e5:e9:39:91:4e:4f:ee:81:46:8c:7d:0d:
                    5f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:89:60:A6:85:1D:5D:19:E0:87:A8:23:58:E4:7C:4C:E1:74:19:27
            X509v3 Authority Key Identifier:
                keyid:0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3138372e3235312e302e302f31392d3234203d3e203332303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.251.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         97:04:dd:93:32:1d:b5:9d:39:bf:6e:b7:86:63:8c:f4:67:e9:
         b9:82:6f:b8:cf:b3:1e:70:56:8a:56:43:4e:22:5e:85:d4:54:
         f9:f7:23:93:24:06:9a:31:b9:62:3f:ec:48:a9:b1:18:be:35:
         cd:c0:8b:b9:3d:ea:b7:d8:51:e1:62:a9:da:73:ef:6a:05:c0:
         c3:e4:d5:f6:da:a4:c7:80:98:3a:6b:a8:71:2b:57:4a:07:a4:
         fc:dc:29:c6:f6:9a:2e:8a:64:53:c2:16:dc:e4:15:d4:7f:3a:
         4a:a7:7a:7a:af:30:6a:e0:50:9a:c8:99:31:ee:5a:38:3a:ad:
         00:26:fc:97:75:5e:aa:72:ea:6a:3a:d1:9f:73:3a:22:63:2f:
         3d:7a:f7:08:94:58:db:35:c0:b7:1f:20:b2:c6:85:5e:8a:ee:
         fc:c0:ac:08:b1:eb:87:c4:a3:69:7e:f1:0e:f0:24:d4:ee:2c:
         ee:60:f1:92:c1:33:7c:e2:8e:c2:3e:f8:26:1d:3f:db:6c:71:
         6c:b1:94:d7:7f:2d:66:90:7b:64:11:c3:e1:78:9d:3e:2d:83:
         76:9d:04:f7:4a:6e:be:b9:16:f2:7a:79:9f:63:3d:cd:23:86:
         6f:f1:4b:f0:33:63:90:a5:08:7f:b8:6c:49:16:eb:bd:fa:6b:
         35:a3:3a:ae
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUSiP+HYq1Zlklq3TF5JikfkoF/X8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEQwMUNGMDI3ODRFNzNDMzRBNUFGMzZDNjAyOUU5NDY0
QTA3MEQzODAeFw0yNjAxMDYxOTM1NDNaFw0yNzAxMDUxOTQwNDNaMDMxMTAvBgNV
BAMTKDMyODk2MEE2ODUxRDVEMTlFMDg3QTgyMzU4RTQ3QzRDRTE3NDE5MjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2q42JMspZd8S6Z75ZH2Yz1HWu
+3iYga4fC3uDyublrguUjzz+Gt23mB74wV1h2WF65Ixb1rRgGTQKtjQCXupfFKNK
3a31/lOb4Hs3NW8h2syoOnMaLxyaCDGS6Hufo+9kbAInw2Pa29vdu2auwMYS4Fdg
qXB1wqJgW1K2vnWU/Xt6hr1CiOGEJU0f4VxdaZwSLYjdt5MSAhHw1GxEzJ2Z9wFu
LUx2/ax0K+BOHqJa7qpVTgoZQYLcQcSem3JPiJSNUlKioMDDe8hBO8x7LG6J3gtD
Wm6NgOI2KeQweK/rcJ5kWA3jUgg5Np3SvhlnsOARReXpOZFOT+6BRox9DV/RAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUMolgpoUdXRngh6gjWOR8TOF0GScwHwYDVR0j
BBgwFoAUDQHPAnhOc8NKWvNsYCnpRkoHDTgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84MzgwOUZFMEQ5N0M4MEY4NzQwRUFEODRFRTc1OEFBMEM1
NjlCMDY5QUU2QjQ5QTY1Njc3MEY4ODVGOTVERDA4LzAvMEQwMUNGMDI3ODRFNzND
MzRBNUFGMzZDNjAyOUU5NDY0QTA3MEQzOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wRDAxQ0YwMjc4NEU3M0MzNEE1
QUYzNkM2MDI5RTk0NjRBMDcwRDM4LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODM4MDlGRTBEOTdDODBGODc0MEVBRDg0RUU3NThBQTBDNTY5QjA2OUFF
NkI0OUE2NTY3NzBGODg1Rjk1REQwOC8wLzMxMzgzNzJlMzIzNTMxMmUzMDJlMzAy
ZjMxMzkyZDMyMzQyMDNkM2UyMDMzMzIzMDM5Mzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAW7+wAwDQYJ
KoZIhvcNAQELBQADggEBAJcE3ZMyHbWdOb9ut4ZjjPRn6bmCb7jPsx5wVopWQ04i
XoXUVPn3I5MkBpoxuWI/7EipsRi+Nc3Ai7k96rfYUeFiqdpz72oFwMPk1fbapMeA
mDprqHErV0oHpPzcKcb2mi6KZFPCFtzkFdR/OkqnenqvMGrgUJrImTHuWjg6rQAm
/Jd1Xqpy6mo60Z9zOiJjLz169wiUWNs1wLcfILLGhV6K7vzArAix64fEo2l+8Q7w
JNTuLO5g8ZLBM3zijsI++CYdP9tscWyxlNd/LWaQe2QRw+F4nT4tg3adBPdKbr65
FvJ6eZ9jPc0jhm/xS/AzY5ClCH+4bEkW6736azWjOq4=
-----END CERTIFICATE-----
Generated at Sun Jan 25 08:29:11 2026 by rpki-client